Re: FreeRADIUS as proxy to Windows IAS

2007-07-30 Thread Dennis Skinner
e Freeradius server up and running on CentOS 4.5, but can't get > it to validate against the IAS server successfully. There is this: http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - Li

Re: Using the various User-Password, Chap-Password, etc... with MySQL

2007-07-30 Thread Dennis Skinner
l work since other protocols do not send the password in cleartext in the request. This is why it is recommended that the cleartext password be stored in the DB since then all protocols will work. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/sub

Re: Adding a NAS via SQL

2007-07-30 Thread Dennis Skinner
Krzysztof Olędzki wrote: > I'm not sure it this is a good idea. What if you need to change for > example a shared secret? Poke it with radclient from a host that is not in the client table? -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List inf

Re: Op values for Attributes

2007-07-25 Thread Dennis Skinner
e := > op or may > it be assigned += , =* , != etc... some other Ops. The answer was posted 2 hours before your email in another thread: http://wiki.freeradius.org/Operators or man users -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subs

Re: mysql accounting connect speeds

2007-07-16 Thread Dennis Skinner
Jeff wrote: > AcctOutputOctets = '%{Acct-Output-Octets}' \ Need comma on live above. This is a MySQL issue, not a FR issue. Please read the MySQL docs if you don't understand how to create a valid query. -- Dennis Skinner Systems Administrator Blue

Re: mysql accounting connect speeds

2007-07-16 Thread Dennis Skinner
scendDataRate = '24000' USRConnectSpeed = > '' WHERE AcctSess' at line 1 You need a comma between data items: 'AscendDataRate = '24000', USRConnectSpeed ='' WHERE AcctSess' ^^^ -- Dennis Skinner Systems Administrator B

Re: accounting exec when Acct-Status-Type == Stop

2007-07-10 Thread Dennis Skinner
ther problems you might have, but you probably should have > 'local' not 'lcal' in that script path for the Stop. And DEFAULT instead of DEFULT. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: iprs and pri and phone numbers ...

2007-06-27 Thread Dennis Skinner
are for setting things. You may also need to play with the "==". I'd have to refer to the docs myself on that point this early in the morning... -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: "Clear text password not available"

2007-06-25 Thread Dennis Skinner
> versions. You can use User-Password, but you should upgrade to a newer > version. Probably should also get rid of: DEFAULTAuth-Type = System Fall-Through = 1 Futher up in the users file. It doesn't look like you are trying to use the /etc/passwd file, which I think is what S

Re: 1.1.6 initial testing

2007-06-21 Thread Dennis Skinner
;pap" returns noop for request 0 > modcall: leaving group authorize (returns ok) for request 0 > !!! rad_check_password: Found Auth-Type System !!! > auth: type "System" Read the *whole* debug output. Comment out line 153 of the users file. Don't set Auth-Type.

Re: 1.1.6 name resolution

2007-06-20 Thread Dennis Skinner
reread the clients.conf file for some reason. Since I think 1.1.6 still has issues with HUP, that means a restart. In short, you can, but it will not see any changes in dynamic IP's unless you restart radiusd. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - Lis

Re: Statistics tool?

2007-06-13 Thread Dennis Skinner
s one of them. This can then be remedied by weekly or nightly restarts. Restarts are really quick and you should have a secondary sitting there waiting if it isn't for some reason. Just don't restart both at the same time. If that is not what you want, then please restate your questi

Re: Statistics tool?

2007-06-13 Thread Dennis Skinner
CS ppl to look at and I know it is working correctly even if there is no traffic because I can see the Nagios check entries. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Statistics tool?

2007-06-12 Thread Dennis Skinner
ep -c Failed radius.log -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Indexing the database

2007-06-12 Thread Dennis Skinner
ock the entire table during inserts. InnoDB does row locking. With InnoDB, you can also pass --single-transaction to mysqldump and it shouldn't interrupt normal operations during nightly dumps for backup purposes. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.blue

Re: To check Simultaneous against 2 NASes

2007-06-12 Thread Dennis Skinner
n the tarball. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: users2mysql Problem Issue 2

2007-06-07 Thread Dennis Skinner
don't want to know that you a running a script, I want to know what the script is doing and why you think it should be putting things in radreply. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: check-config option

2007-06-07 Thread Dennis Skinner
should have your test. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: using encrypted passwords in users file or sql-radcheck table

2007-05-30 Thread Dennis Skinner
outside of yum. Or yell at Fedora until they update their repository. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: DDNS problem

2007-05-29 Thread Dennis Skinner
on those IP's who wants to talk to you NAS and can figure out the secret to potentially do naughty things. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: AW: AW: Grouping users and clients

2007-05-24 Thread Dennis Skinner
LDAP, I think you will need LDAP-Group instead of SQL-Group in the huntgroups file. I'm not sure what it will look like in the LDAP schema, but I am pretty sure others are doing this. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe

Re: Radius compatibility questions

2007-05-22 Thread Dennis Skinner
w.freeradius.org/ http://wiki.freeradius.org/Main_Page http://deployingradius.com/ especially: http://deployingradius.com/documents/protocols/compatibility.html Then grab the tarball and read the files in the doc dir, the man pages, and the comments in the config files. If you still have questions, g

Re: Freeradius and rlm_mysql with encrypted PWD's

2007-05-22 Thread Dennis Skinner
nds... http://deployingradius.com/documents/protocols/compatibility.html -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius <=> MS IAS passthrough

2007-05-16 Thread Dennis Skinner
Never say: >>>>>> it "just doesn't work." show us. Run radiusd -X and show us what is happening when you try and tell us what you think should be happening. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List inf

Re: no session showed by radwho, but user still could not login

2007-05-15 Thread Dennis Skinner
Trio wrote: > :) > Please read my 1st email,there is a words > "I want only 1 session for every user" It is not a boolean option. 0 means you want 0 sessions for every user (i.e. they cannot login). 1 means 1 session, 2 means 2 sessions, etc... -- Dennis Skinner Sy

Re: User /etc/shadow for Authentication

2007-04-24 Thread Dennis Skinner
erenced in the *authorize* section at the bottom of the conf file. Oh, and obviously you'll want to remove (or at least change) that entry in the users file. Run the server in debug mode (radiusd -X) and test. I've never tried to use /etc/shadow myself, but the comments in the conf

Re: Crypt passwords doesn't work

2007-04-18 Thread Dennis Skinner
th-Type unless you really know what you are doing. Also, I think you want := instead of ==. There is no Crypt-Password attribute in the request, so you can't compare them. Use := to set Crypt-Password and then let FR do its magic. -- Dennis Skinner Systems Administrator BlueFrog Internet

Re: R: R: cisco device says "% Backup authentication" and won't log me in

2007-04-06 Thread Dennis Skinner
this sounds network related. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cisco Configuration

2007-04-04 Thread Dennis Skinner
Norman Zhang wrote: > I'm learning how to use freeradius. Does anyone have a working conf that > works for cisco devices? Did you try the default one? -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscrib

Re: Duplicate accounting log entries

2007-04-04 Thread Dennis Skinner
ral months of data. You may not see this as often as I do b/c I reload my pools fairly often, but making that db column unique is absolute and those NAS's will be reloaded at some point. Just FYI. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/sub

Re: Duplicate accounting log entries

2007-04-04 Thread Dennis Skinner
ystem, I found a significant slowdown on inserts when the table got above about 5 million records. If you are still getting a lot of duplicates, then you may want to work with the ppl who own the NAS's to adjust the timeouts. They may have then set too low for some reason. -- Dennis Skinn

Re: Duplicate accounting log entries

2007-04-03 Thread Dennis Skinner
first one. Notice the User-Name is part of the mix, hence Alan's question about how they could be the same. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: LDAP + CHAP problem

2007-03-28 Thread Dennis Skinner
hem. LDAP goes in the *authorization* section. CHAP goes in the *authentication* section. Read that carefully. Also read the debug output very carefully. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.

Re: accounts disappears!

2007-03-21 Thread Dennis Skinner
Marwan Sultan wrote: > Do you have any hint or know anything about disappearing users in mysql > database? Turn on mysql query logging. Wait for user to disappear. Check log. See what generated that query. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefr

Re: freeradius simultenoues-use error

2007-03-09 Thread Dennis Skinner
ript can u send me i > am in problem :( Have a look at bash scripting and expect. It is fairly simple and you may be able to get away with it. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius simultenoues-use error

2007-03-08 Thread Dennis Skinner
ing exactly what you told it to do. Now go make the rest of your system behave or fudge it as I have described. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius says client is unknown.

2007-02-27 Thread Dennis Skinner
u have locate on your system. Just be aware that it may not always be accurate. "Finding" a file from the root of the filesystem on a "clean" server (ie fresh install w/o unnecessary apps or a GUI) should be pretty quick. -- Dennis Skinner Systems Administrator BlueFr

Re: Strange problems in large proxy setup

2007-02-23 Thread Dennis Skinner
on radius in debugging mode and send the output to a file that you can review for anomalies. If it is happening often enough and you don't want to run the primary radius in debug mode, you could do it on the secondary and force a failover for a short time and try to catch it. -- Denni

Re: freeradius sql /mssql

2007-02-22 Thread Dennis Skinner
the debug log, but if the group is in sql, then the huntgroup file should look something like this: testbad NAS-IP-ADDRESS == some.ip SQL-Group = suspend Hopefully that helps.... -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.co

Re: log to mysql?

2007-02-20 Thread Dennis Skinner
(non-debugging) mode, the > FreeRadius logs are basically useless. They can be useful to CS staff. All you need is a perl script that uses the File::Tail module. It basically tails the log file and grabs out some info and does mysql inserts. I modified ours from a popb4smtp script I found on

Re: Freeradius dies if it cant resolve clients...

2007-02-14 Thread Dennis Skinner
Jóhann B. Guðmundsson wrote: > Dennis Skinner > >> Or list them in /etc/hosts > > Wouldnt recommend it... If you are obsessed with using names instead of IP's in the clients.conf file and you don't want to depend on DNS, this is your other option. It may be bene

Re: Freeradius dies if it cant resolve clients...

2007-02-14 Thread Dennis Skinner
Alan DeKok wrote: > Jóhann B. Guðmundsson wrote: >> I had the unfortunate experience for my radius daemon to die when it >> couldn't >> resolve one client in clients.conf > > Yes. The answer is to not use DNS names for clients. Use IP addresses. Or lis

Re: EAP-PEAP/MS-ChapV2 password storing options

2007-02-12 Thread Dennis Skinner
Matt Ashfield wrote: > In order to get EAP-PEAP/MS-ChapV2 to work with FreeRadius, what are my > options for storing the password in LDAP? Does it have to be clear-text? I think this is what you want: http://deployingradius.com/documents/protocols/compatibility.html -- Dennis Skinner S

Re: freeradius doesn´t connect to mysql server

2007-02-05 Thread Dennis Skinner
ay not be what you expect it to be and if you are not careful with DNS/rDNS, then it will look confusing to MySQL and you. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Major impact on authentication!

2007-02-05 Thread Dennis Skinner
makes it very easy to watch and see what processes are taking too long and holding up the rest. I'm not sure if there is a similar app out there for postgresql, but it'd be worth a look. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Disconnect user in radius

2007-01-31 Thread Dennis Skinner
other words >> Check the NAS docs for disconnecting a user. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Disconnect user in radius

2007-01-31 Thread Dennis Skinner
cript or any option to > integrate with webpage of dialupadmin ??? You need to change your thinking. The user is not connected to RADIUS. Never was. That isn't what RADIUS does. The user is connected to your NAS. Check the NAS docs for disconnecting a user. -- Dennis Skinner Systems Ad

Re: Why Freeradius and Mysql dont work?

2007-01-31 Thread Dennis Skinner
t need to reset the root password, you never set one in the first place! Now, go read. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Why Freeradius and Mysql dont work?

2007-01-29 Thread Dennis Skinner
s it needs. Then REVOKE the rights I just had you GRANT above. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to get Log files

2007-01-25 Thread Dennis Skinner
in debug mode (-X). If you want a record, do something like this: radiusd -X >> debug.log tail -f debug.log Otherwise, don't run it in debug mode. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Small problem with authentication

2007-01-24 Thread Dennis Skinner
on NFS volumes can cause problems if not done correctly. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Best practices for redundant servers

2007-01-18 Thread Dennis Skinner
rt them into the db (there is a module to help with this). Radius will happily skip queries that take too long or if there are not enough mysql connections available on the accounting side. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsu

Re: CHAP with crypt

2007-01-12 Thread Dennis Skinner
be in clear text because it cannot decrypt the password that it was sent. See this for further details: http://deployingradius.com/documents/protocols/compatibility.html In short, the answer is: no, secure your database. -- Dennis Skinner Systems Administrator BlueFrog Interne

Re: a bit off-topic policy question

2007-01-08 Thread Dennis Skinner
t answer is don't give high-level access to this box to people you don't trust. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Fw: My AP does accountig but radwho doesn't work..

2007-01-04 Thread Dennis Skinner
anything. > rlm_radumtp: WARNING: checkrad will probably not work! > modcall[accounting]: module "radutmp" returns noop for request 9 You did read the entire output, right? It looks like it gave you your answer. -- Dennis Skinner Systems Administrator BlueFrog Inte

Re: MySQL authentication problem

2007-01-02 Thread Dennis Skinner
Ian Truelsen wrote: > BTW, I just noticed that while there is a section in authorize for sql, > there is not one in authenticate. Is that correct? > Yes, radius does authentication. MySQL stores the password for radius. -Dennis - List info/subscribe/unsubscribe? See http://www.freeradius.or

Re: FreeRadius overview

2006-12-28 Thread Dennis Skinner
word from the Platy table. Something like: SELECT id,username,"Password",password,"==" from customers where username="blah" So you are "hardcoding" the attribute and operator into the query. But as I said, you really should use a separate set of tables. -

Re: FreeRadius overview

2006-12-28 Thread Dennis Skinner
urning fields get mapped into RADIUS attributes? (what do > you do when the db calls the field "uname" and RADIUS calls it > "user-name") You haven't looked at sql.conf, have you? -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: problem with mysql accounting

2006-12-21 Thread Dennis Skinner
s. Esp if they are rebooted. Looking for a Timestamp Start within X hours of NOW() may help you out there. Otherwise you may update really old rows and have sessions that look like they lasted 30 days or something. We ran into this problem. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple ISPs and big user database

2006-12-21 Thread Dennis Skinner
| 2 | [EMAIL PROTECTED] | ISP2 | +---++---+ It should just work. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: User authentication using Mysql table - radacct

2006-12-20 Thread Dennis Skinner
n when running it in regular mode? Give us the commandline you are using to start it in both modes. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius hosting

2006-12-19 Thread Dennis Skinner
mething else? Read closer "Radiuz lets you determine exactly how open or closed you want to your network to be. If you choose to make your network accessible to other Radiuz members, the system allows you to monitor usage so you can see who is using your network." -- Denni

Re: User authentication using Mysql table - radacct

2006-12-19 Thread Dennis Skinner
can see what is happening when you try to auth. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RE : MySQL: don't logging to radacct

2006-12-12 Thread Dennis Skinner
ng is done on a different UDP port than Auth requests. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySQL: don't logging to radacct

2006-12-12 Thread Dennis Skinner
t;User-Password = "adsl" >NAS-IP-Address = 255.255.255.255 >NAS-Port = 0 > rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=206, length=20 Because you haven't sent one. That is an access request, not an accounting request. -- Denn

Re: FreeRadius, OpenLDAP, Samba, etc.

2006-11-07 Thread Dennis Skinner
Auth-Type. If you didn't do it in LDAP, check around line 152 in the users file. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius seems to be working, but not getting it to respond

2006-11-06 Thread Dennis Skinner
les is running, ask it: iptables -nL man iptables On CentOS/RedHat, you can stop iptables by doing this: /etc/init.d/iptables stop -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Another Installation Problem

2006-10-31 Thread Dennis Skinner
hen you *don't* want the "tar file", you need to go to your distro's repository. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Another Installation Problem

2006-10-31 Thread Dennis Skinner
download a gz file (as opposed to bz2) the command is slightly different: tar xvzf file.tar.gz "man tar" is your friend. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Another Installation Problem

2006-10-31 Thread Dennis Skinner
The rest should be obvious -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius installation problem.

2006-10-31 Thread Dennis Skinner
hat people can help you with. 2. There was probably an error in make. Look again. If you do something like "make > make_output.txt" that will save the normal STDOUT output to a file (to review later if you like) and the STDERR will still go to your screen and will be easier to see. --

Re: problem with proxy configuration

2006-10-17 Thread Dennis Skinner
On a side note... if you don't want to use CVS to track config changes as Alan suggests, you should at least make a backup copy of the original configs that shipped with the tarball (with all their handy inline documentation) to refer to when you get stuck. -- Dennis Skinner Sy

Re: problem with proxy configuration

2006-10-17 Thread Dennis Skinner
but instead are authenticated by the RADIUS server itself. # # You don't need a secret if BOTH 'authhost' and 'accthost' are # set to LOCAL. # #realm bla.com { # type= radius # authhost= LOCAL # accthost= LOCAL #} "LOCAL&

Re: FreeRADIUS user Survey

2006-10-05 Thread Dennis Skinner
Alan DeKok wrote: > "Guilherme Franco" <[EMAIL PROTECTED]> wrote: >> Survey Not Found > > Whoops... the "make active" link didn't work. I poked it again. Still "Survey Not Found" as of right now. -- Dennis Skinner Systems Administrato

Re: Prefixing Topics with Mailing list name

2006-09-26 Thread Dennis Skinner
chever is the list email address. I do this all the time in Gmail. It works better than filtering by subject when ppl forward from one list that has subject tags to another. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe?

Re: How I improve perfomace.

2006-08-10 Thread Dennis Skinner
indexes on the tables. See the MySQL docs for EXPLAIN and performace. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: user auth against mysql

2006-08-08 Thread Dennis Skinner
ery 10 minutes. Users were told to wait 10 mins before trying to login after an account change (reactivation, password update, etc). -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Answer

2006-08-08 Thread Dennis Skinner
e and writes (accounting) are done on the master. This should help speed up things. I also recommend using InnoDB engine instead of the default MyISAM. MyISAM does table locking instead of row locking. Also database dumps for backups can be done without locking the table with InnoDB. -- Dennis

Re: LDAP retrieve additional attributes and map to radius attributes

2006-08-08 Thread Dennis Skinner
ng the same exact question, you will be ignored. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: read_groups in cvs

2006-08-08 Thread Dennis Skinner
Please don't top post. It makes it hard to respond and have it make sense Duane Cox wrote: > Dennis Skinner wrote: >> My own testing found that the usergroup table would not be used unless >> the SQL-Group attribute is found. I set it in the huntgroups file >> myse

Re: Question

2006-08-08 Thread Dennis Skinner
ary server is the only one to accept accounting requests, if that server goes down, you will have missing data. The client won't store them and wait for the primary to come back. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscr

Re: FreeRADIUS and Postgres annoyance

2006-08-08 Thread Dennis Skinner
equest to FR. I'm sure Postgres has something similar. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: read_groups in cvs

2006-08-07 Thread Dennis Skinner
I did find the part that you quoted misleading though... -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: limiting user access

2006-08-02 Thread Dennis Skinner
ress in the huntgroups file because I have upstream RADIUS providers to deal with -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: huntgroups and mysql

2006-08-02 Thread Dennis Skinner
econd entry. The usergroup table takes care of that. > -- usergroup -- > > idUserNameGroupName > 1 testfirstgroup When someone tries to login, the preprocess section will run the huntgroups file and if the NAS-IP-Address matches, it will set the SQL-Grou

Re: Freeradius & Oracle

2006-08-01 Thread Dennis Skinner
gt;> >> Alan DeKok. >> -- >> http://deployingradius.com - The web site of the book >> http://deployingradius.com/blog/ - The blog >> - List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > - List info/su

Re: Error: Discarding duplicate request

2006-07-27 Thread Dennis Skinner
y to get help: http://www.freeradius.org/list/users.html -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius Autostart

2006-07-11 Thread Dennis Skinner
ld be plenty in /etc/init.d to use for examples. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius Log File ?

2006-06-29 Thread Dennis Skinner
Scott Miller wrote: > /usr/local/sbin/radiusd -X FreeRADIUS doesn't write to the log file in debug mode (or at least it never used to). Start it without the -X then send it some login requests and check the log. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.blue

Re: Mysql Tribox(Asterisk)

2006-06-28 Thread Dennis Skinner
need to flush the privs afterwards. See the MySQL docs. They are very good. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

sqlcounter, always does the lookup or conditional

2006-06-23 Thread Dennis Skinner
g the check items? The latter would really save some overhead if only a few customers were time limited. Thanks! -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mysql issue

2006-05-25 Thread Dennis Skinner
they stay there. If you do "show processlist" or run mytop, you will see a bunch of idle processes until radiusd starts doing something. As to your first issue, are you sure it isn't network or firewall related? -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.b

Re: debugging mode

2006-05-19 Thread Dennis Skinner
s > per second, far too much to simply look at as it comes in. Yep, hence: >> You should be doing this on a test machine anyway. Debugging on a >> production system is tough. :) -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subs

Re: debugging mode

2006-05-19 Thread Dennis Skinner
t; > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.1.392 / Virus Database: 268.6.1/343 - Release Date: 18/05/2006 > - List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Trying to configure with --prefix causes install to fail

2006-05-19 Thread Dennis Skinner
It's a known bug, and it'll be fixed in 1.1.2. > http://bugs.freeradius.org/show_bug.cgi?id=354 If it is the same problem I had, the workaround/fix is to edit the Makefile and add a line to create the libs directory. Just copy one of the other lines. Its near the top of the

Re: (no subject)

2006-05-12 Thread Dennis Skinner
ge tables take a long time to change, so you will be unable to write to them during that time. Reads will also be quite slow (if it responds at all). I took our radius servers offline during the change at like 4am. Archiving old accounting data will help too. -- Dennis Skinner Systems Adminis

Re: Fwd: Regular expression - Trying to rewrite User-Name

2006-05-12 Thread Dennis Skinner
still something running on that port or something else caused it to error out. *After* you send a request and it gets rejected, Control-C will get your prompt back and terminate the radiusd -X. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Fwd: Regular expression - Trying to rewrite User-Name

2006-05-11 Thread Dennis Skinner
Zoltan Ori wrote: > On Thursday 11 May 2006 16:30, Dennis Skinner wrote: >> Are you responding to me? >> > Yes, he is. I was subtly suggesting he should include relevant text in his responses like I am doing. If someone searches the archives later, they have no context for

Re: Fwd: Regular expression - Trying to rewrite User-Name

2006-05-11 Thread Dennis Skinner
on how to rewrite a username using regex (exactly what you are trying to do) with just the hints file. It is a bit more elegant and will likely rewrite the username sooner in the processing, allowing you to use the new username in huntgroups, etc. -- Dennis Skinner Systems Administrator BlueFr

Re: Rm: Mysql 5.0 with freeradius 1.1.1

2006-05-11 Thread Dennis Skinner
. Third, you can still use the old password format. Fourth, please avoid sending html to the list. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

  1   2   >